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(54) Title: STAND-ALONE BIOMETRIC IDENTIFICATION SYSTEM 
(57) Abstract 



A distributed biometric 
identification system incorporates 
stand-alone workstations. The system 
generally includes a plurality of 
stand-alone workstations capable 
of communicating with a central 
server remotely located from the 
workstations. The workstations 
receive input biometric data, such 
as fingerprint and photographic data, 
and compares that data to biometric 
data stored in the workstation. The 
workstation compares the input - 
biometric data with stored biometric 
data to determine whether any of 
the stored biometric data matches 
the input biometric data. The results 
of the comparison are provided to 
the workstation screen. Workstation 
mobility is improved by housing 
the workstation in a self-contained, 
compartmentalized carrying case. 
Workstation mobility may be even 
further enhanced by housing the 
workstation in a so-called lunchbox 
configuration having a main body, a 
front panel hinged to the main body, 
and a back panel hinged to the main 
body. The front and back panels each 
have a stowed position adjacent the 
main body, and a deployed position away from 
body, front panel, and back panel) is a compact, 
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STAND-ALONE BIOMETRIC IDENTIFICATION SYSTEM 

TECHNICAL FJELP QF THEj XNVFNTIQN 

The present invention relates generally to 
identification systems. More particularly, it relates to 
a method and apparatus for identifying individuals based on 
biometric information such as fingerprints and photographs . 

BACKGROUND OF THE INVENTION 

In the past/ identification of individuals that are 
processed by the Immigration and Naturalization Service 
(INS) or other governmental agencies, for example, has been 
a relatively slow process. Although many governmental 
agencies maintain large databases containing fingerprints, 
photographic information and other relevant data pertaining 
to individuals that use the services of the respective 
agencies, no known system has been able to quickly search 
and retrieve information relating to identification and 
interaction with these individuals. For example, the INS 
interacts with and is required to identify millions of 
persons each year, including immigration law violators, 
" immigrat "ion "Benef it applicants ", individuals" " requesting 
asylum, travelers, and visitors to the United States. Many 
encounters are processed under severe time constraints and 
with insufficient access to relevant information. 

A co-pending commonly owned patent application, serial 
no. 08/857, 112 filed on May 15, 1997 addresses this problem 
by providing a distributed biometric identification system 
and architecture for 1 rapidly identifying individuals using 
fingerprint and photographic data. The disclosed 
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architecture includes a centralized server, a plurality of 
distributed client workstations that are remotely located 
from the centralized server, and a wide area 
telecommunications network interconnecting the client 
workstations to the server. The centralized server 
includes a transaction management subsystem, a database for 
storing fingerprint minutiae of individuals that are of 
interest to users of the system, a matching controller 
subsystem coupled between the transaction management 
subsystem and the database for matching fingerprints of 
individuals to fingerprints stored in the database, and an 
image storage and retrieval subsystem for storing and 
retrieving electronic images of fingerprints and 
photographic images of individuals . 

Still another co-pending, commonly owned patent 
application, serial No. 08/937,956 filed on September 25, 
1997 is directed to an improvement over the above-described 
distributed biometric system wherein user location options, 
user mobility, and overall user access to the system is 
even further enhanced by providing highly mobile user 
workstations. More particularly, the invention disclosed 
in serial No. 08/937, 956 may be embodied in a distributed, 
mobile biometric identification system and architecture for 
rapidly identifying individuals using fingerprint and 
photographic data. The disclosed architecture includes a 
.central iz.ect server r a . . -plurality of d±S-txibu±ed , - mobi 1 e 
client workstations that are remotely located from the 
centralized server, and a two-way modem connection for 
providing a communications medium between the client 
workstations and the server. 

The above-described mobile workstation is preferably 
embodied in a substantially portable computing environment 
having, for example, a portable computer, a portable camera 
coupled to the computer, a portable fingerprint scanner 
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coupled to the computer. Preferably, the communications 
link includes a land-based or satellite-based mobile 
radiotelephone . 

The above-described distributed biometric systems are 
highly effective in allowing a large number of remotely 
located users to access, search, compare and retrieve 
various types of biometric identifying data/information. 
The present invention is directed to an improvement wherein 
user location options, user mobility, and overall user 
access to the distributed biometric system is even further 
enhanced . 
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SUMMARY OF THE INVENTION 

The present invention may be embodied in a distributed 
biometric identification system having a plurality of 
stand-alone user workstations. More particularly, the 
invention may be embodied in a distributed biometric 
identification system and architecture for rapidly 
identifying individuals using fingerprint and photographic 
data. The disclosed architecture includes a plurality of 
substantially stand-alone work stations. The workstations 
communicate with one another, via a centralized server, in 
a variety of ways, including modem and/ r or a wide-area or 
local-area telecommunications network. Each work station 
includes a transaction management subsystem, a database for 
storing fingerprint minutiae of individuals that are of 
interest to users of the system, a matching controller 
subsystem coupled between the transaction management 
subsystem and the database of matching fingerprints of 
individuals to fingerprints stored in the database, and an 
image storage and retrieval subsystem for storing and 
retrieving electronic images of fingerprints and 
photographic images of individuals. the modem of WAN/ LAN 
telecommunications network allows the stand-alone 
workstations to communicate with the centralized INS server 
in order to provide information about each workstations 
activities. The information from each workstation is 
gathered at a centralized INS server and re-distributed to 
all stand-alone workstations as a update to each 
workstation' s files . 

The above-described stand-alone workstation is 
preferably embodied in a computer-based environment having, 
for example, a conventional person computer, a camera 
coupled to the computer, a fingerprint scanner coupled to 
the computer, and a communications link coupled to the 
computer. Preferably, the communications link includes a 
modem communicating through a land-based radiotelephone, a 
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satellite-based mobile radiotelephone, the PSTN, a WAN/ LAN 
connection, or other medium. 

In one embodiment of the present invention, the above- 
described personal computer has, for example, 32 MB of RAM, 
an AC power supply, an AC cable, an MRT video cable, a 
modem/phone cable, an ethernet cable, MRT VideoPort PC 
card, and a Megahertz 33.6 modem/ ethernet . The personal 
computer may be configured with Windows 95 operating system 
software, for example, The personal computer may be 
further configured with a user-friendly and intuitive 
graphical, user interface using, for example, Microsoft 
Visual C++ software, and a Structured Query Language (SQL) 
based, client-server, front end query tool. 'The personal 
displays menu-driven screens from which users may select 
specific functions (such as search and enroll, search only, 
and verify functions) that are to be performed by the 
computer. 

In another embodiment of the present invention, the 
personal computer is replaced with a so-called "notebook" 
or "laptop" computer having, for example, 32 MB of RAM, an 
AC power supply, an AC cable, an MRT video cable, a 
modem/phone cable, an ethernet cable, MRT VideoPort PC 
card, and a Megahertz 33.6 modem/ethernet . The laptop 
computer may be configured with Windows 95 operating system 
software, for example. The laptop computer may be further 
configured with a user-friendly and intuitive graphical 
user interface using, for example, Microsoft Visual C++, 
and a Structured Query Language (SQL) based, client-server, 
front end query tool. The laptop displays menu-driven 
screens from which users may select specific functions 
(such as search and enroll, search only, and verify 
functions) that are to be performed by the system. 

In another embodiment of the present invention, the 
laptop computer, camera, fingerprint scanner and 
modem/radiotelephone are electronically coupled together 
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and conveniently housed in a carrying case. For example, 
a two-piece, hinged rugged construction carrying case may 
be outfitted with a foam template having cutouts for 
holding in place the various components, a power strip for 
accepting the power cord connections of the various 
components and providing 12 volt AC power thereto, and a 12 
volt DC invertor having a 12 volt extension cord for 
coupling the strip to an alternative power source, for 
example, a cigarette lighter of an automobile. The power 
strip preferably includes surge suppressor circuitry to 
protect the various components from damage due to power 
surges . 

In still another embodiment of the invention, the 
above-described computers may be housed in a portable, 
substantially rectangular, self-contained unit known 
generally as a "lunchbox" CPU. The lunchbox, according to 
the present invention, includes a main body, or folded down 
to a deployed position away from the main body. In 
general, the main body houses the main computing boards and 
a display screen, the front panel houses a keyboard, and 
the back panel houses the camera, the fingerprint scanner 
and the modem/radiotelephone. When in their stored 
positions, the front and back panels and the main body 
combine to form the portable lunchbox. When the front 
panel is deployed, it exposes the keyboard and the display 
screen on the main body. When the back panel is deployed, 
it exposes the camera, fingerprint scanner and 
radiotelephone . 

The following describes the procedures that can be 
followed when using the above-described system in 
connection with immigration services. When an individual 
is identified as an undocumented alien, he/she is taken to 
a stand-alone workstation. The workstation operator 
chooses the "search and enroll" feature. The initiation of 
"search and enroll" brings up a screen that prompts the 
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operator to first place the alien's left index finger on 
the fingerprint scanner. The screen then prompts the 
operator to place the right index finger on the fingerprint 
scanner. Quality analysis is performed on the scanned 
fingerprint data to make sure that the fingerprint image is 
of sufficient quality. The computer then turns on the 
camera and prompts the user to snap a photograph of the 
individual . 

After the picture is taken, the user is returned to 
the entry screen for entry of non-biometric data (referred 
to herein as "biodata"). The user then enters the alien's 
name, birthdate, age and any other information that can be 
obtained. The workstation computer associates all 

"biodata" with the current biometric data and with the 
current request. Upon completion of the biodata screen, a 
submit button is pressed. The submit button initiates the 
sending of data to the databases stored in the computer of 
the workstation. A key feature of the invention is that 
the data needed to perform the searches is provided at all 
of the workstations, and updated periodically over a widely 
available communications link such as the public switched 
telephone network (PSTN), land-based radiotelephone 
infrastructure, satellite-based communications, or a 
WAN/ LAN network. 

The workstation's computer begins processing the input 
data, freeing the workstation to begin enrolling another 
individual. A status indicator on the bottom of the 
workstation screen indicates the status of a particular 
transaction. The workstation computer searches a number of 
databases, each of which has its own meaning. The 
databases are referred to generally as "lookout", 
"recidivists", "asylum", and "benefits". The lookout 
database contains information on individuals with criminal 
records on file with the Immigration and Naturalization 
Services, or who are considered to be "lookouts" posing 
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potential threats to the health and safety of border patrol 
personnel. The recidivists database contains information 
on individuals who have attempted to enter the U.S. 
illegally on multiple occasions. The asylum database 
contains individuals encountered during an asylum 
application process. The asylum information is checked to 
detect and reduce immigration fraud. The benefit database 
is used to verify the identity of individuals encountered 
during the benefit serving process to approve or deny 
applications or petitions for immigration benefits. 

The workstation computer reports the number of hits, 
if any. The workstation may then call up the biometric 
data and/or the biodata for each hit in order to review it 
and make a determination of whether the "hit" is the 
individual in question. 

The present invention may be embodied in a stand-alone 
workstation of ruse in connection with a distributed 
biometric identification system, said workstation 
comprising: a portable computer having databases 

containing stored biometric data; a biometric data input 
system coupled to said portable computer; a portable 
communications terminal coupled to said portable computer; 
said biometric data input system capable of receiving input 
biometric information and providing said input biometric 
information to said computer; said computer programmed to 
compare said input biometric data to be stored biometric 
data in said databases; and said computer further 
programmed to transmit over said communications terminal 
input biometric data that should be stored in said 
databases as an update to that database; said computer 
further programmed to receive over said communications 
terminal and store in said database update biometric 
information from other stand-alone workstations. 

In an alternative embodiment of the above described 
workstation, said input biometric data comprises input 
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fingerprint data; said stored biometric data comprises 
stored fingerprint data; and said computer determines 
whether stored fingerprint information matches said input 
fingerprint data. 

The present invention may also be embodied in a stand- 
alone workstation for use in connection with a distributed 
biometric identification system, said workstation 
comprising: a portable carrying case containing a portable 
computer, a biometric data input system coupled to said 
portable computer, a portable communications terminal 
coupled to said portable computer, and a power strip for 
coupling power to said computer, biometric data input 
system, and communications terminal; said computer having 
databases containing stored biometric data; said biometric 
data input system capable of receiving input biometric 
information and providing said input biometric information 
to said computer; said computer programmed to compare said 
input biometric data to stored biometric. 

The present invention may also be embodied in a stand- 
alone workstation for use in connection with a distributed 
biometric identification system, said workstation 
comprising: a portable computer having a main body, a 
front panel hinged to said main body, and a back panel 
hinged to said main body; said front panel having a stowed 
position adjacent said main body and a deployed position 
away from said main body; said back panel having a stowed 
position adjacent said main body and a deployed position 
away from said main body; a biometric data input system 
coupled to said portable computer and at least partially 
housed in said back panel; a portable communications 
terminal coupled to said portable computer and at least 
partially housed in said back panel; said computer 
including databases storing stored biometric data; said 
biometric data input system capable of receiving ' input 
biometric information and providing said input biometric 
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information to said computer; said computer programmed to 
compare said input biometric data to said stored biometric 
data. 

The invention itself, together with further objects 
and attendant advantages, will best be understood by 
reference to the following detailed description, taken in 
conjunction with the accompanying drawings. 
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BRIEF DES CRIPTION OF THE DRAWINGS 

FIG. 1 is a diagram of a stand-alone workstation that 
is part of a distributed biometric identification system 
embodying the present invention. 

FIG. 2 is an alternative embodiment of the stand-alone 
workstation shown in FIG. 1, including a notebook/ laptop 
computer and a portable case. 

FIG. 3 is another alternative embodiment of the stand- 
alone workstation shown in FIGS. 1 and 2, wherein the 
workstation is housed in a lunchbox configuration. 

FIGS. 4 and 5 further illustrate the lunchbox 
configuration shown in FIG. 3. 

FIG. 6 is a diagram illustrating the software 
operations that perform the biometric identification 
functions of the workstations shown in FIGS. 1-5. 
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DESCRIPTION OF THE EMBODIMENTS 

By way of introduction, a general description of the 
invention and the disclosed embodiments thereof will now be 
provided. The present invention may be embodied in a 
distributed biometric identification system having a 
plurality of stand-alone user workstations. More 
particularly, the invention may be embodied in a 
distributed, biometric identification system and 
architecture for rapidly identifying individuals using 
fingerprint and photographic data. The disclosed 

architecture includes a plurality of substantially stand- 
alone workstations . The workstations communicate with one 
another, and with a remote centralized INS server, over a 
variety of communications means, including modem and a 
LAN/WAN telecommunications network interconnecting the 
client workstations. Each workstation includes a 

transaction management subsystem, a database for storing 
fingerprint minutiae of individuals that are of interest to 
users of the system, a matching controller subsystem 
coupled between the transaction management subsystem and 
the database for matching fingerprints of individuals to 
fingerprints stored in the database, and an image storage 
and retrieval subsystem for storing and retrieving 
electronic images of fingerprints and photographic images 
of individuals. The communications link between the 
workstations and a centralized INS server allows the stand- 
alone workstations to exchange activity at each workstation 
in order to update each workstation's files. 

The above-described stand-alone workstation is 
preferably embodied in a substantially portable computing 
environment having, for example, a portable computer, a 
portable camera coupled to the computer, a portable 
fingerprint scanner coupled to the computer, and a 
substantially portable communications link coupled to the 
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computer. Preferably, the communications link includes a 
lanci-based or satellite-based mobile radiotelephone. 

In one embodiment of the present invention, the 
portable computer includes a so-called "notebook" or 
"laptop" computer having for example 32MB of RAM, an AC 
power supply, and an AC power cable. Additionally, the 
portable computer is outfitted with an MRT VideoPort PC 
card and a Megahertz 33.6 modem/ ethernet card. The MRT 
VideoPort PC card serves as the interface between the 
portable computer hardware and the fingerprint scanner and 
the color camera. An MRT video cable is also provided to 
connect the MRT VideoPort PC card to the fingerprint 
scanner and the color camera. The Megahertz 33.6 

modem/ethernet card provides the portable computer the 
ability to network to the INS server from local and remote 
sites. Specifically, networking from local sites can be 
accomplished through the ethernet functionality of the 
card. Remote networking can be accomplished through the 
use of the 33.6 baud modem functionality of the card. 
Additionally, the required network and telephone cables are 
also used in the configuration. The portable computer may 
be configured with Windows 95 operating system software, 
for example. The portable computer may be further 
configured with a user-friendly and intuitive graphical 
user interface using, for example, Microsoft Visual C++ 
software, and a structured language (SQL) based, client- 
server, front end query tool. The SQL software is an off 
the shelf product from Oracle®. The SQL software if the 
foundation of the Oracle® component. The SQL language 
performs the operation of enabling the query communication 
between Oracle® components . The portable computer ' s screen 
displays menu-driven screens form which users may select 
specific functions (such as search and enroll, search only, 
and verify functions) that are to be performed by the 
system. 
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In another embodiment of the present invention, the 
laptop computer/ camera, fingerprint scanner and 
radiotelephone are electronically coupled together and 
conveniently housed {inaudible} carrying case* For 
example, a two-piece, hinged rugged construction carrying 
case may be outfitted with a foam template having cutouts 
for holding in place the various components, a power strip 
for accepting the power cord connections of the various 
components and providing 12 volt AC power thereto, and a 12 
volt DC invertor having a 12 volt extension cord for 
coupling the strip to an alternative power source, for 
example, a cigarette lighter of an automobile- The power 
strip preferably includes surger suppressor circuitry to 
protect the various components from damage due to power 
surges . 

In still another embodiment of the invention, the 
above-described portable computer may be housed in a 
portable, substantially rectangular, self-contained unit 
known generally as a "lunchbox" CPU. The lunchbox, 
according to the present invention, includes a main body, 
a front panel and a back panel . The front and back panels 
are hinged to the main body such that each may be folded up 
to a stowed position against the main body, or folded down 
to a deployed position away from the main body. In 
general, the main body houses the main computing boards and 
a display screen, the front panel houses a keyboard, and 
the back panel houses the camera, the fingerprint scanner 
and the radiotelephone. When in their stowed positions/ 
the front and back panels and the main body combine to form 
the portable lunchbox. When the front panel is deployed, 
it exposes the keyboard and the display screen on the main 
body. When the back panel is deployed, it exposes the 
camera, fingerprint scanner and radiotelephone. 

In still another embodiment of the invention, the 
workstation may be a personal computer having a camera 



WO 99/16025 



PCT/US98/20192 



15 

coupled to the computer, a fingerprint scanner coupled to 
the computer, and a communications link coupled to the 
computer. Preferably, the communications link includes a 
land-based or satellite-based mobile radiotelephone. 

In one embodiment of the present invention, the above- 
described personal computer has, for example, 32 MB of RAM, 
an AC power supply, and an AC power cable. Additionally, 
the personal computer is outfitted with an MRT VideoPort PC 
card and a Megahertz 33.6 modem/ethernet card. The MRT 
VideoPort PC card serves as the interface between the 
personal computer hardware and the fingerprint scanner and 
the color camera. An MRT video cable is also provided to 
connect the MRT VideoPort PC card to the fingerprint 
scanner and the color camera. The Megahertz 33.6 
modem/ethernet card provides the personal computer the 
ability to network to the INS server from local and remote 
sites. Specifically, networking from local sites can be 
accomplished through the ethernet functionality of the 
card. Remote networking can be accomplished through the 
use of the 33.6 baud modem functionality of the card. 
Additionally, the required network and telephone cables are 
also used in the configuration. The computer may be 
configured with Windows 95 operating system software, for 
example. The computer may be further configured with a 
user-friendly and intuitive graphical user interface using, 
for example, Microsoft Visual C++ software, and a 
structured language (SQL) based, client-server, front end 
query tool. The SQL software is an off-the-shelf product 
from Oracle®. The SQL software is the foundation of the 
Oracle® level of communication within the system. that is, 
when the system user enters a query the Oracle® component 
that accepts the query needs to be able to communicate the 
query over the network to another Oracle® component. The 
SQL language performs the operation of enabling the query 
communication between Oracle® components. The portable 
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computer's screen displays menu-driven screens from which 
users may select specific functions (such as search and 
enroll, search only, and verify functions) that are to be 
performed by the system. 

The following describes the procedures that can be 
followed when using the above-described system in 
connection with immigration services. When an individual 
is identified as an undocumented alien, he/she is taken to 
a mobile workstation. The workstation operator chooses the 
"search and enroll" feature- the initiation of "search and 
enroll" brings up a screen that prompts the operator to 
first place the alien's left index finger on the 
fingerprint scanner. The screen then prompts the operator 
to place the right index finger on the fingerprint scanner. 
Quality analysis is performed on the scanned fingerprint 
data to make sure that the fingerprint image is of 
sufficient quality. The screen then turns on the camera 
and prompts the user to snap a photograph of the 
individual . 

After the picture is taken, the user is returned to 
the entry screen for entry of non-biometric data (referred 
therein as "biodata"). The user then enters the alien's 
name, birth date, age and any other information that can be 
obtained. The workstation associates all "biodata" with 
the current biometric data and with the current request. 
Upon completion of the biodata screen, a submit button is 
pressed. The submit button initiates the sending of data 
to the databases stored in the computer of the workstation. 
A key feature of the invention is that the data needed to 
perform the searches is provided at all of the 
workstations, and updated periodically over a widely 
available communications link such as the public switched 
telephone network (PSTN) , land-based cellular telephone 
infrastructure, or satellite-based communications. 
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The workstation's computer begins processing the input 
data, freeing the workstation to begin enrolling another 
individual. A status indicator on the bottom of the 
workstation screen indicates the status of a particular 
transaction. The workstation computer searches number of 
databases, each of which has its own meaning. The 
databases are referred to generally as "lookout", 
"recidivists", "asylum", and "benefits". The lookout 
database contains information on individuals with criminal 
records on file with the Immigration and Naturalization 
Services, or who are considered to be "lookouts" posing 
potential threats to the health and safety of border patrol 
personnel. The recidivists database contains information 
on individuals who have attempted to enter the U.S. 
illegally on multiple occasions. The asylum database 
contains individuals encountered during an asylum 
application process. The asylum information is checked to 
detect and reduce immigration fraud. The benefits database 
is used to verify the identity of individuals encountered 
during the benefit serving process to approve or deny 
applications or petitions for immigration benefits. 

The workstation computer reports the number of hits, 
if any. The workstation company may then call up the 
biometric data and/or the biodata for each hit in order to 
review it and make a determination of whether the "hit" is 
the individual in question. 

Referring now to FIG. 1, a diagram of a system 
employing the present invention is shown. The system 
generally includes a stand-alone station 10 having a user 

interface , a transaction table 20 and a core 30. The 

core 30 includes a transaction manager 40, a fingerprint 
manager 50, an image storage an retrieval manager 60, a 
fingerprint and photograph database 70, and various 
databases 80. All information regarding previously 
apprehended individuals is housed in the core 30. The 
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transaction manager 40 performs the function of controlling 
the functionality of the core 30. The user interface 
(referred to as "IDENT") provides the user with a graphical 
interface for interacting with the system. The user 
interface 15 performs the functions of providing user 
interface for the capture of biometric data 16 and 
transaction processing 17. The software functionality of 
the IDENT interface and information processing will be 
addressed more thoroughly in conjunction with FIG . 6. 

When an individual is apprehended/ the fingerprint 
matcher 50 is used to scan the fingerprints of the 
individual. The fingerprint scanner then scans the 
relevant databases 80 for information regarding the 
individual. The current encounter with the individual is 
then recorded in the relevant databases 80 as well as 
fingerprints and photographs of the individual. The 
transaction table 20 performs the function of recording any 
information that is added to the local databases 70, 80 of 
the core 30. Periodically, the transaction table 20 
transmits the recorded information to the INS system which 
includes a centralized INS server. This enables the INS 
system to always be up to date with the latest information 
regarding individuals . 

Because the INS database at the centralized INS server 
in the central point for all information and changes to the 
databases, the local databases 70, 80 of the core 30 in the 
stand-alone system 10 are updated periodically from the INS 
system. Periodic updating enables each system user to be 
apprised to he latest information regarding apprehended 
individuals . The updates to and from the INS system may be 
scheduled to occur at regular intervals. 

The stand-alone workstation 10 provides fingerprint 
matching functionality along with database and transaction 
management functions. Database functions may include but 
are not limited to the storage and retrieval of biodata 
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such as fingerprints, biographical history, and 
photographs. The database may also contain information as 
to whether an individual is dangerous, a repeat immigration 
offender, or eligible for asylum and benefits. The 
workstation 10 may also include software modules that allow 
the system user to begin processing paperwork regarding an 
apprehended individual before returning to an office to 
complete processing of the individual* Traditionally, 
paperwork on apprehended individuals has been typed on a 
typewriter and photocopied as necessary. The software 
modules at the workstation, along with the central server 
10, allow the system user to enter relevant biodata from 
the apprehended individual into a database. The biodata 
may then be accessed and printed as needed by all 
authorized users of the workstation. Such software modules 
may include detention facility information, such as 
location of a prisoner within the prison system; and 
immigrant benefits and asylum information. 

FIG. 2 illustrates an alternative embodiment of the 
workstation 10 wherein the personal computer is replaced 
with a mobile access station having a mobile computing 
terminal 35, . and remote access components such as a 
cellular telephone 40, a satellite connection 45, and a 
landline connection 50, as well as appropriate hardware for 
connecting to the above-noted remote accBss components and 
other input and output devices. Hardware for gaining 
remote access may include a modem or some other 
communication-type card that may be interfaced with the 
mobile computing terminal 35. Remote access components 
provide the system user a communication path between the 
mobile computing terminal 35 and a central INS station (not 
shown) . 

The mobile access station 30 shown in FIG. 2 includes 
a mobile computing terminal 35, a cellular telephone 40, a 
satellite connection 45, a land line connection 50, a color 
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camera 55, and a fingerprint scanner 60. The mobile 
computing terminal 35 may be embodied in a portable 
notebook computer operating on the Windows 95® environment. 
The mobile computing terminal 35 gains access to the remote 
INS system via one of fourth paths including: the cellular 
telephone 40, the satellite connection 45, the land line 
connection 50, or the LAN/ WAN connection 52. The use of a 
cellular telephone 40 to establish communication preferably 
comprises the use of a three Watt cellular phone known in 
the art as a "bag phone". The use of a bag telephone 
provides a better data path to the remote access server 65 
than a low power "hand-held" cellular telephone. When the 
mobile computing terminal establishes communication to the 
INS location it is done so through an access server 62. 
The access server 62 performs the function of verifying the 
adenoid of the entity who is attempting to gain access to 
the INS system. In addition to the aforementioned 
communication devices, the mobile access station 30 
includes a color camera 55 and a fingerprint scanner 60. 
The color camera 55 and a fingerprint scanner 60 are used 
to gather biometric data from the individual, in question. 
The color camera 55 may be a digital camera or any other 
device suitable for obtaining digital images of apprehended 
individuals. The fingerprint scanner 60 is provided for 
obtaining digital images of the individual's fingerprints, 
digital fingerprint scanners are well known in the art. 
The color camera 55 and the fingerprint scanner 60 are 
interfaced to the mobile computing terminal 35 via a video 
capture card, which is known in the art. 

In another embodiment, a two piece carrying case 65 
(see FIG. 2) may be used to house the mobile computing 
terminal 35, the cellular telephone 40, the color camera 
55, and the fingerprint scanner 60. The carrying case 65 
provides component protection from shock and water damage. 
Additionally, the carrying case 65 eliminates the need for 
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field personnel to connect the various components of the 
mobile access station 30 together each time the system is 
to be used. Rather the carrying case embodiment encases 
the connected hardware and creates one self-contained unit 
providing a power connection by which to power the unit. 
The power connection may be a 120 VAC connection. 
Alternatively, the power connection may be adapted to 
receive 12 VDC input from an automobile cigarette lighter. 

FIG. 3 illustrates another embodiment of the 
workstation 10 of the present invention. This alternate 
embodiment varies form the previous embodiment in that the 
computing terminal 35 and its carrying case 65 housing are 
replaced by a "lunchbox" 70. The lunchbox 70 is a self 
contained processing unit and carrying case. The 
processing unit and operating system of the lunchbox 7 0 are 
identical to that of the mobile computing terminal 35. The 
lunchbox 70 is capable of accepting a number of different 
computer cards, which perform the function of interfacing 
to the cellular telephone 40, the color camera 55, the 
fingerprint scanner 60, the satellite connection 45, and 
the land line connection 50. Additionally, the lunchbox 7 0 
configuration houses the cellular telephone 40, the color 
camera 55, and the fingerprint scanner 60 in a manner 
similar to the carrying case 65. 

The lunchbox 70 configuration offers the advantages of 
being lightweight, small, low cost, self contained, and 
" easy to maintain. Another distinct advantage is the 
addition of a bright .screen that can be read in bright 
daylight, as opposed to a conventional laptop LCD screen 
that is difficult to read in bright sunshine. Similar to 
the carrying case 65 configuration, the only external 
component to the lunchbox 70 is a power cord. Power may be 
provided either using 120 VAC or 12VDC. 

Side and plan view of the lunchbox 70 configuration 
can be seen in FIGS. 4 and 5. The lunchbox 70 
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configuration comprises a main housing 75, a keyboard 80, 
a foldable front panel 85, a foldable back panel 90, a 
display screen 95, and a processing unit (not shown) and 
associated interface cards (not shown) for accessing the 
cellular telephone 40, the color camera 55, and the 
fingerprint scanner 60 ♦ 

The front panel 85 folds down from an upright and 
locked position that covers the display screen 95 to a 
downward position which reveals the keyboard 80 . Likewise, 
the back panel 90 folds down to permit user access to the 
cellular telephone 40, the color camera 55, and the 
fingerprint scanner 60. A major advantage to this 
particular feature is the fact that when the both the front 
and back panels 85, 90 are closed and locked against the 
main housing 75 the keyboard 8 0, the display screen 95, and 
other associated components 40, 55, and 60 are protected 
from damage. 

FIG. 6 illustrates the software operations performed 
by the stand-alone workstations shown in FIGS. 1-5. As 
shown in FIG. 6, the ident21m.exe file 100 is an executable 
file that is used on the mobile ident system. The 
ident21m.exe file 100 is the file that controls the 
functions of the mobile ident terminal. The indent.ini 
file 110 holds initialization information that is used to 
initialize the ident21m.exe file 100, the mrtcapl6.dll file 
120, and imagemob.exe file 130. The ident.ini file 110 
contains information pertaining to the hardware that is 
interfaced to the various software functions. For example, 
if a new fingerprint scanner is used, the indent.ini file 
110 is the only file that must be changed to accommodate 
the hardware change. 

The mrtcapl6.dll file 120 performs the function of 
controlling video captures in the system. Specifically, 
the mrtcapl6.dll file 12 0 controls the fingerprint scanner 
and the color camera. After digital images are captured by 
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the mrtcapl6.dll file 120, they are passed to the 
imagemob.exe file 130, which performs the function of 
compressing and extracting digital images. The imagmob.exe 
file 130 makes software calls to third party software 
referred to as Cogent 140. Cogent 140 performs the 
processing of the images received by the imagemod.exe file 
130. 

The ident21m.exe file 100 is interfaced to an ident 
transaction manager 150 which is located at the stand-alone 
workstation. The transaction manager 150 performs the 
function of receiving the image and biodata, as well as 
providing a software pathway from the idnet21m.exe file 100 
to the central server 10, which is located at a remote 
site. Additionally, the ident21m.exe file 100 controls the 
on-screen display. On-screen display (OSD) software 160, 
such as the on-screen display software available from 
Accusoft) is used to create various gray-scale on-screen 
displays. The OSD software 160 also provides various 
display utilizes that aid in process on-screen graphics. 
The i213.jpg file 170 is a graphics file that is printed 
when needed. Typically the i213.jpg file 170 is a form 
that is required when processing an apprehended individual. 

When an individual is apprehended the system user 
selects an icon from the on-screen display, which 
preferably represents a Windows 95 environment. The icons 
represent the method of interface to the databases. The 
system user is then prompted to enter verification. Upon 
completion of verification the system user may elect to 
enroll the apprehended individual into the database located 
at the workstation. After selecting the enroll option, the 
ident.ini file 110 initializes all relevant files. As 
enrollment continues, the mrtcap 16.dll file 120 performs 
the function of controlling the color camera and 
fingerprint scanner in a manner to obtain necessary 
information from the individual. The video images are 
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compressed by known compression software 140 (e.g., 
available from "Cogent") under the control of the 
imagemob.exe file 130. The information is then transferred 
to the transaction manager 150 via the indent21m.exe file 
100. The transaction manager 150 forwards the information 
to the databases. Queries as to the history of the 
apprehended individual are also forwarded to the databases 
in a similar fashion. Information regarding the history of 
the individual is returned to the indent21m.exe file 100 
via the transaction manager 150. The received information 
is transferred to the screen display using OSD software 
160. 

Of course, it should be understood that a range of 
changes and modifications can be made to the preferred 
embodiment described above. For example, the present 
invention is described in connection with a particular 
hardware and processing structure for transmitting and 
receiving live biometric data. However, a wide variety of 
transmitting and receiving structures could be utilized as 
long as the essential stand-alone workstation features 
described herein are present. It is therefore intended 
that the foregoing detailed description be regarded as 
illustrative rather than limiting and that it be understood 
that it is the following claims, including all equivalents, 
which are intended to define the scope of this invention. 
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WHAT IS C LAIMED ISt 

1. A stand-alone workstation for use in connection 
with a distributed biometric identification system, said 
workstation comprising: 

a portable computer having databases containing stored 
biometric data; 

a biometric data input system coupled to said portable 
computer; 

a portable communications terminal coupled to said 
portable computer; 

said biometric data input system capable of receiving 
input biometric information and providing said input 
biometric information to said computer; 

said computer programmed to compare said input 
biometric data to said stored biometric data in said 
databases ; and 

said computer further programmed to transmit over said 
communications terminal input biometric data that should be 
stored in said databases as an update to that database; 

said computer further programmed to receive over said 
communications terminal and store in said database update 
biometric information from other stand-alone workstations. 

2. The workstation of claim 1 wherein: 

said input biometric data comprises input fingerprint 

data; 

said stored biometric data comprises stored 
fingerprint data; and 

said computer determines whether stored fingerprint 
information matches said input fingerprint data. 
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3. The workstation of claim 1 wherein: 

said input biometric data comprises input photographic 

data; 

said stored biometric data comprises stored 
5 photographic data; and 

said computer determines whether stored photographic 
information matches said input photographic data. 

4. The workstation of claim 1 wherein said portable 
10 computer comprises a laptop computer* 

5. The workstation of claim 1 wherein said biometric 
data input system comprises a fingerprint scanner. 

15 6. The workstation of claim 1 wherein said biometric 

data input system comprises a camera. 
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7. The workstation of claim 1 wherein said biometric 
data input system comprises a fingerprint scanner and a 
camera . 
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8. A stand-alone workstation for use in connection 
with a distributed biometric identification system, said 
workstation comprising: 

a portable carrying case containing a portable 
computer, a biometric data input system coupled to said 
portable computer, a portable communications terminal 
coupled to said portable computer, and a power strip for 
coupling power to said computer, biometric data input 
system, and communications terminal; 

said computer having databases containing stored 
biometric data; 

said biometric data input system capable of receiving 
input biometric information and providing said input 
biometric information to said computer; 

said computer programmed to compare said input 
biometric data to stored biometric. 

9. The workstation of claim 8 wherein said carrying 
case further comprises internal compartments for securing 
each of said computer, biometric data input system, and 
said communications terminal. ' 

10. The workstation of claim 9 wherein said internal 
compartments comprise cushion material. 
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11. A stand-alone workstation for use in connection 
with a distributed biometric identification system, said 
workstation comprising: 

a portable computer having a main body, a front panel 
hinged to said main body, and a back panel hinged to said 
main body; 

said front panel having a stowed position adjacent 
said main body and a deployed position away from said main 
body; 

said back panel having a stowed position adjacent said 
main body and a deployed position away from said main body; 

a biometric data input system coupled to said portable 
computer and at least partially housed in said back panel; 

a portable communications terminal coupled to said 
portable computer and at least partially housed in said 
back panel; 

said computer including databases storing stored 
biometric data; 

said biometric data input system capable of receiving 
input biometric information and providing said input 
biometric information to said computer; 

said computer programmed to compare said input 
biometric data to said stored biometric data. 

12. The workstation of claim 11 wherein said computer 
generates stored biometric information that matches said 
input biometric data. 

13. The workstation of claim 11 wherein said computer 
generates information indicating that no stored biometric 
information at said file server matches said input 
biometric data. 
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